2,730 results · Clear filters · Feed
-
MediumELSA-2017-2492 1 CVE
Moderate: xmlsec1 security update (Oracle Linux 7)
[1.2.20-7] - CVE-2017-1000061 - Related: #1472092 - Fix mis-applied patch hunk [1.2.20-6] - CVE-2017-1000061 - Resolves: #1472092
-
MediumELSA-2017-1859 1 CVE
Moderate: golang security, bug fix, and enhancement update (Oracle Linux 7)
[1.8.3-1] - bump to 1.8.3 - fix CVE-2017-8932 - Resolves: rhbz#1452616, rhbz#1452241, rhbz#1457169, rhbz#1448346
-
Medium max 5.9ELSA-2017-2335 1 CVE
Moderate: pki-core security update (Oracle Linux 7)
[10.4.1-11] - Resolves: rhbz #1469432 - ########################################################################## - RHEL 7.4: - ########################################################################## - Bugzilla Bug #1469432 - CMC plugin default change - R…
-
MediumELSA-2017-2445 1 CVE
Moderate: qemu-kvm security update (Oracle Linux 7)
[1.5.3-141.el7_4.1] - kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107] - Resolves: bz#1468107 (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])
-
MediumELSA-2017-2060 15 CVEs
Moderate: GStreamer security, bug fix, and enhancement update (Oracle Linux 7)
clutter-gst2 [2.0.18-1] - Update to 2.0.18 - Remove obsolete patches - Use license macro for COPYING - Resolves: #1386833 gnome-video-effects [0.4.3-1] - Update to 0.4.3 - Resolves: #1386968 [0.4.1-5] - Fix URL (rhbz#1380981) gstreamer-plugins-bad-free [0.10.…
-
MediumELSA-2017-1868 1 CVE
Moderate: python security and bug fix update (Oracle Linux 7)
[2.7.5-58.0.1] - Add Oracle Linux distribution in platform.py [orabug 20812544] [2.7.5-58] - Set stream to None in case an _open() fails. Resolves: rhbz#1432003 [2.7.5-57] - Fix implicit declaration warnings of functions added by patches 147 and 265 Resolves:…
-
MediumELSA-2017-1852 1 CVE
Moderate: openldap security, bug fix, and enhancement update (Oracle Linux 7)
[2.4.44-5] - fix CVE-2017-9287 openldap: Double free vulnerability in servers/slapd/back-mdb/search.c (#1458210) [2.4.44-4] - NSS: Include some CHACHA20POLY1305 ciphers (#1432907) [2.4.44-3] - NSS: re-register NSS_Shutdown callback (#1405354) [2.4.44-2] - Inc…
-
MediumELSA-2017-1860 2 CVEs
Moderate: libtasn1 security, bug fix, and enhancement update (Oracle Linux 7)
[4.10-1] - Updated to the 4.x branch (#1360639)
-
MediumELSA-2017-2000 7 CVEs
Moderate: tigervnc and fltk security, bug fix, and enhancement update (Oracle Linux 7)
fltk [1.3.4-1] - Re-base to 1.3.4 (+ sync with Fedora) tigervnc [1.8.0-1] - Update to 1.8.0 Resolves: bz#1388620 [1.7.90-2] - Make RandR callbacks optional Resolves: bz#1444948 [1.7.90-1] - Update to 1.7.90 Resolves: bz#1388620 [1.7.1-3] - Delete underlying s…
-
MediumELSA-2017-2016 1 CVE
Moderate: curl security, bug fix, and enhancement update (Oracle Linux 7)
[7.29.0-42] - fix use of uninitialized variable detected by Covscan [7.29.0-41] - make FTPS work with --proxytunnel (#1420327) [7.29.0-40] - make FTPS work with --proxytunnel (#1420327) [7.29.0-39] - work around race condition in PK11_FindSlotByName() in NSS …
-
MediumELSA-2017-2128 1 CVE
Moderate: gdm and gnome-session security, bug fix, and enhancement update (Oracle Linux 7)
gdm [3.22.3-11] - Add japanese translation Resolves: #1449632 [3.22.3-10] - Add patches to try to maintain some semblance of compatibility when live upgrading between 7.3 and 7.4 Related: #1448786 [3.22.3-9] - Make sure reauthentication is run within the user…
-
MediumELSA-2017-2258 2 CVEs
Moderate: gtk-vnc security, bug fix, and enhancement update (Oracle Linux 7)
[0.7.0-2] - Fix reserved data size (rhbz #1416783) - Fix inverted args in tests (rhbz #1416783) - Avoid sign extension problems (rhbz #1416783) - Fix crash with opening via GSocketAddress (rhbz #1416783) - Fix crash & error reporting during connection timeout…
-
MediumELSA-2017-2285 1 CVE
Moderate: authconfig security, bug fix, and enhancement update (Oracle Linux 7)
[6.2.8-30] - do not use /usr and LIBDIR together (#1455233) [6.2.8-29] - update translations (#1449625) [6.2.8-28] - ignore PAM_IGNORE for pam_succeed_if so application do not fail in pam_setcred() (#1450425) [6.2.8-27] - fix typo in the patch for CVE-2017-74…
-
MediumELSA-2017-1975 1 CVE
Moderate: libreoffice security and bug fix update (Oracle Linux 7)
[1:5.0.6.2-14.0.1] - Replaced RedHat colors with Oracle colors, and the filename redhat.soc with oracle.soc in specfile - Build with --with-vendor='Oracle America, Inc.' [1:5.0.6.2-14] - Resolves: rhbz#1454693 segv on interrupting tiled rendering [1:5.0.6.2-1…
-
Medium max 7.8ELSA-2017-2029 5 CVEs
Moderate: openssh security, bug fix, and enhancement update (Oracle Linux 7)
[7.4p1-11 + 0.10.3-1] - Compiler warnings (#1341754) [7.4p1-10 + 0.10.3-1] - Add missing messages in FIPS mode (#1341754) [7.4p1-9 + 0.10.3-1] - Allow harmless syscalls for s390 crypto modules (#1451809) [7.4p1-8 + 0.10.3-1] - Fix multilib issue in documentat…
-
MediumELSA-2017-1916 5 CVEs
Moderate: glibc security, bug fix, and enhancement update (Oracle Linux 7)
[2.17-196] - Avoid large allocas in the dynamic linker (#1452721) [2.17-195] - Rounding issues on POWER (#1457177) [2.17-194] - Use a built-in list of system call names (#1439165) [2.17-193] - Inhibit FMA while compiling sqrt, pow (#1413638) [2.17-192] - Excl…
-
MediumELSA-2017-1983 2 CVEs
Moderate: postgresql security and enhancement update (Oracle Linux 7)
[9.2.21-1] - update to 9.2.21 per release notes http://www.postgresql.org/docs/9.2/static/release-9-2-21.html http://www.postgresql.org/docs/9.2/static/release-9-2-20.html http://www.postgresql.org/docs/9.2/static/release-9-2-19.html [9.2.18-2] - package libp…
-
Medium max 6.5ELSA-2017-1865 3 CVEs
Moderate: X.org X11 libraries security, bug fix and enhancement update (Oracle Linux 7)
libICE [1.0.9-9] - Add upstream patch to not pull libbsd - Add custom patch for Fedora 24 & 25 [1.0.9-8] - Fix changelog [1.0.9-7] - Use libbsd for randoms (CVE-2017-2626, rhbz#1427715) [1.0.9-6] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Reb…
-
MediumELSA-2017-2299 1 CVE
Moderate: NetworkManager and libnl3 security, bug fix and enhancement update (Oracle Linux 7)
NetworkManager [1:1.8.0-9] - device: don't change MTU unless explicitly configured (rh #1460760) - core: don't remove external IPv4 addresses (rh #1459813) [1:1.8.0-8] - cli: fix output of iface in overview output (rh#1460219) - ppp: unexport NMPPPManager ins…
-
Medium max 6.2ELSA-2017-1931 3 CVEs
Moderate: bash security and bug fix update (Oracle Linux 7)
[4.2.46-28] - CVE-2016-9401 - Fix crash when '-' is passed as second sign to popd Resolves: #1429838 [4.2.46-27] - CVE-2016-7543: Fix for arbitrary code execution via SHELLOPTS+PS4 variables Resolves: #1426026 [4.2.46-26] - CVE-2016-0634: Fix for arbitrary co…
-
MediumELSA-2017-2004 2 CVEs
Moderate: git security and bug fix update (Oracle Linux 7)
[1.8.3.1-11] - dissalow repo names beginning with dash Resolves: CVE-2017-8386 [-1.8.3.1-10] - do not put unsanitized branch names in Resolves: CVE-2014-9938 [-1.8.3.1-9] - add control of GSSAPI credential delegation to enable HTTP(S)-SSO authentication Resol…
-
Medium max 7.5ELSA-2017-1854 5 CVEs
Moderate: pidgin security, bug fix, and enhancement update (Oracle Linux 7)
[2.10.11-5] - Drop MXit support in RHEL Resolves: #1439296 [2.10.11-4] - Silence -Wsign-compare - Rename the previous patch for consistency Resolves: #1445921, #1446368 [2.10.11-3] - Avoid a use-after-free in an error path Resolves: #1445921 [2.10.11-2] - Add…
-
Medium max 5.4ELSA-2017-1856 3 CVEs
Moderate: qemu-kvm security, bug fix, and enhancement update (Oracle Linux 7)
[1.5.3-141.el7] - kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745] - kvm-Do-not-hang-on-full-PTY.patch [bz#1452067] - kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067] - kvm-serial-reinstate-watch-after-migration.patch [bz#1…
-
MediumELSA-2017-2192 21 CVEs
Moderate: mariadb security and bug fix update (Oracle Linux 7)
[1:5.5.56-2] - Do not fix context and change owner if run by root in mariadb-prepare-db-dir Related: #1458940 - Check properly that datadir includes only expected files Related: #1356897 [1:5.5.56-1] - Rebase to 5.5.56 That release also fixes the following se…
-
MediumELSA-2017-2292 7 CVEs
Moderate: gnutls security, bug fix, and enhancement update (Oracle Linux 7)
[3.3.26-9] - Address crash in OCSP status request extension, by eliminating the unneeded parsing (CVE-2017-7507, #1455828) [3.3.26-7] - Address interoperability issue with 3.5.x (#1388932) - Reject CAs which are both trusted and blacklisted in trust module (#…
-
MediumELSA-2017-1871 45 CVEs
Moderate: tcpdump security, bug fix, and enhancement update (Oracle Linux 7)
[14:4.9.0-5] - Resolves: #1441597; use bigger capture buffer than in upstream [14:4.9.0-4] - Drop downstream patch (drop root privileges) - Add libcap-ng as a new build dependency - Related: #1262283 [14:4.9.0-3] - Fix tests according to our patches and libpc…
-
MediumELSA-2017-1574 1 CVE
Moderate: sudo security update (Oracle Linux 7)
[1.7.2p1-29.0.2] - Fix CVE-2017-1000368
-
Medium max 6.4ELSA-2017-1265 3 CVEs
Moderate: samba security and bug fix update (Oracle Linux 7)
[4.4.4-13] - resolves: #1437816 - Fix krb5 memory cache in libads sasl code - resolves: #1437741 - Fix CVE-2016-2125, CVE-2016-2126 and CVE-2017-2619
-
MediumELSA-2017-1204 6 CVEs
Moderate: java-1.7.0-openjdk security update (Oracle Linux 7)
[1:1.7.0.141-2.6.10.1.0.1] - Update DISTRO_NAME in specfile [1:1.7.0.141-2.6.10.1] - Bump to u141b02 to include S8011123 fix for TCK failure. - Resolves: rhbz#1438751 [1:1.7.0.141-2.6.10.0] - Bump to 2.6.10 and u141b00. - Adjust RH1022017 following applicatio…
-
MediumELSA-2017-1108 6 CVEs
Moderate: java-1.8.0-openjdk security and bug fix update (Oracle Linux 7)
[1:1.8.0.131-2.b13] - Backport 'S8153711: [REDO] JDWP: Memory Leak: GlobalRefs never deleted when processing invokeMethod command' - Resolves: rhbz#1442162 [1:1.8.0.131-1.b11] - Update to aarch64-jdk8u131-b11. - Drop upstreamed patches for 8147910, 8161993, 8…
-
MediumELSA-2017-0906 3 CVEs
Moderate: httpd security and bug fix update (Oracle Linux 7)
[2.4.6-45.0.1.4] - replace index.html with Oracle's index page oracle_index.html [2.4.6-45.4] - Resolves: #1396197 - Backport: mod_proxy_wstunnel - AH02447: err/hup on backconn [2.4.6-45.3] - prefork: fix delay completing graceful restart (#1327624) - mod_lda…
-
MediumELSA-2017-0914 1 CVE
Moderate: libreoffice security and bug fix update (Oracle Linux 7)
[1:5.0.6.2-5.0.1.1] - Replaced RedHat colors with Oracle colors, and the filename redhat.soc with oracle.soc in specfile - Build with --with-vendor='Oracle America, Inc.' [1:5.0.6.2-5.1] - Resolves: rhbz#1435534 CVE-2017-3157 Arbitrary file disclosure in Calc…
-
Medium max 7.5ELSA-2017-0935 2 CVEs
Moderate: tomcat security update (Oracle Linux 7)
[0:7.0.69-11] - Resolves: rhbz#1413591 CVE-2016-8745 tomcat: information disclosure due to incorrect Processor sharing - Resolves: rhbz#1402662 CVE-2016-6816 tomcat: HTTP Request smuggling vulnerability due to permitting invalid character in HTTP requests
-
Medium max 5.5ELSA-2017-0907 1 CVE
Moderate: util-linux security and bug fix update (Oracle Linux 7)
[2.23.2-33.0.1.el7_u3.2] - fix Oracle bug 23001516 - backport lscpu: correct the Virtualization type on Xen DomU PV guest - Reviewed-by: Joe Jin <joe.jin@oracle.com> [2.23.2-33.el7_3.2] * fix CVE-2017-2616 - Sending SIGKILL to other processes with root privil…
-
Medium max 6.5ELSA-2017-0838 6 CVEs
Moderate: openjpeg security update (Oracle Linux 7)
[1.5.1-16] - Revert previous changes in patch for CVE-2016-5159 - Fix memory leaks Related: #1419772 [1.5.1-15] - Add two more allocation checks to patch for CVE-2016-5159 Related: #1419772 [1.5.1-14] - Fix CWE-825 errors in patch for CVE-2016-5158 Related: #…
-
Medium max 8.1ELSA-2017-0388 1 CVE
Moderate: ipa security and bug fix update (Oracle Linux 7)
[4.4.0-14.0.1.el7_3.6] - Blank out header-logo.png product-name.png Replace login-screen-logo.png [20362818] [4.4.0-14.6] - Resolves: #1416488 replication race condition prevents IPA to install - wait_for_entry: use only DN as parameter - Wait until HTTPS pri…
-
MediumELSA-2017-0286 2 CVEs
Moderate: openssl security update (Oracle Linux 7)
[1.0.1e-48.4] - fix CVE-2017-3731 - DoS via truncated packets with RC4-MD5 cipher - fix CVE-2016-8610 - DoS of single-threaded servers via excessive alerts
-
Medium max 7.5ELSA-2017-0276 1 CVE
Moderate: bind security update (Oracle Linux 7)
[32:9.9.4-38.2] - Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)
-
MediumELSA-2017-0252 5 CVEs
Moderate: ntp security update (Oracle Linux 7)
[4.2.6p5-25.0.1.el7_3.1] - Bump release to avoid ULN conflict with Oracle modified errata. [4.2.6p5-25.el7_3.1] - don't limit rate of packets from sources (CVE-2016-7426) - don't change interface from received packets (CVE-2016-7429) - fix calculation of root…
-
Medium max 7.5ELSA-2017-0254 2 CVEs
Moderate: spice security update (Oracle Linux 7)
[0.12.4-20] - Fix buffer overflow in main_channel_alloc_msg_rcv_buf when reading large messages. Resolves: CVE-2016-9577 - Fix remote DoS via crafted message. Resolves: CVE-2016-9578